[CLSA-2026:1792659976] Fix of 11 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 09:06:35 UTC
Description:
* SECURITY UPDATE: security hardening in the memory allocator and the multipart request parser - debian/patches/php-8.1-CVE-2026-109618-109619.patch: report allocation failures without re-entering the engine from the allocator error path, and take substring_conf()'s length as size_t rather than int; upstream 1d7dec17 (PHP 8.1 branch) also disables the session upload-progress callback as upstream does on the EOL branches, so session.upload_progress.enabled no longer has any effect - CVE-2026-109618 - CVE-2026-109619
Updated packages:
  • alt-php81_8.1.34-39_amd64.deb
    sha:5a60018a922a09c393977733ec5402c60dbec810
  • alt-php81-bcmath_8.1.34-39_amd64.deb
    sha:fd597c14e1d3d36f6b9fffaa32c41046c6f5d9d0
  • alt-php81-cli_8.1.34-39_amd64.deb
    sha:780a8d90526b2d1b61426994e769714b5aa48e74
  • alt-php81-common_8.1.34-39_amd64.deb
    sha:ae91c9f4f8384f0da6048fdc96f9dfd8558335cf
  • alt-php81-dba_8.1.34-39_amd64.deb
    sha:69e6a006c50c25bcf4c44e5e21ac59333be7350e
  • alt-php81-dev_8.1.34-39_amd64.deb
    sha:641142078f13edabb5c5e8eb7189ad0c38105fdc
  • alt-php81-enchant_8.1.34-39_amd64.deb
    sha:6a4ae434223f03e15e5bc2640d95444f12470145
  • alt-php81-firebird_8.1.34-39_amd64.deb
    sha:83d16f756c0bc1f4049c7a3ec3e62a9313b89ce8
  • alt-php81-gd_8.1.34-39_amd64.deb
    sha:2fc1dc716d2b383e15907bc1f213c79af234ef0f
  • alt-php81-imap_8.1.34-39_amd64.deb
    sha:b8c6fd46f7e398c7fbaa6d0b7d232b4d93aa7b2a
  • alt-php81-intl_8.1.34-39_amd64.deb
    sha:56fd33b24ee951f2eda2428db25bcb99cd23b69d
  • alt-php81-ldap_8.1.34-39_amd64.deb
    sha:573a8c9b10f254bd3523c12fd32966f2fc3d3b7f
  • alt-php81-mbstring_8.1.34-39_amd64.deb
    sha:78c413faf28f29ac4ce02c9b9cb095c4d204f7a4
  • alt-php81-mysqlnd_8.1.34-39_amd64.deb
    sha:c4de380ab3c86fd79a22acb70b0be5ff0c904f18
  • alt-php81-odbc_8.1.34-39_amd64.deb
    sha:f8d7d3f176d06b9c45809b7f38c44f9cc94194a8
  • alt-php81-opcache_8.1.34-39_amd64.deb
    sha:056d1a98b2d4e233304f365023ba357186c9e352
  • alt-php81-pdo_8.1.34-39_amd64.deb
    sha:60cb498c0f7eaccdaa83e7402fe33210c3fe6ea9
  • alt-php81-pgsql_8.1.34-39_amd64.deb
    sha:beab75580cbc53786c4568ec64ddd1e5d6f2a4d3
  • alt-php81-php-fpm_8.1.34-39_amd64.deb
    sha:aa6d2f2b54450989c195f2f2d15ea4ea4c10910d
  • alt-php81-process_8.1.34-39_amd64.deb
    sha:3285ff17aeaabe0177f1f49c440406dd973034fb
  • alt-php81-pspell_8.1.34-39_amd64.deb
    sha:de7f7e029a72e7a0d443ccb5380832592f2b332c
  • alt-php81-snmp_8.1.34-39_amd64.deb
    sha:c86f2df1d6d88e0baea47db3e668fbd3c44a66fa
  • alt-php81-soap_8.1.34-39_amd64.deb
    sha:3d5029e556c7e313883fe18a43f45935c0a842c9
  • alt-php81-sodium_8.1.34-39_amd64.deb
    sha:c680c4955cf7a42d8854f47a0e89a3e32f3fe1b4
  • alt-php81-tidy_8.1.34-39_amd64.deb
    sha:3722e2cb1766711dd38fd25a9c682e100c3e7a4d
  • alt-php81-xml_8.1.34-39_amd64.deb
    sha:d77f998375f1036d1c5d1eba93f7280c9c6c2765
  • alt-php81_8.1.34-39_arm64.deb
    sha:55c64b017819c8c4593c4548854856809af6befc
  • alt-php81-bcmath_8.1.34-39_arm64.deb
    sha:cca1b96a8584841222636c97c193d8e8201a755f
  • alt-php81-cli_8.1.34-39_arm64.deb
    sha:35066fb95643951ea26df0860b645b211b120e6f
  • alt-php81-common_8.1.34-39_arm64.deb
    sha:c4f971871874197a7dcf211ff1f554c8f28f78a8
  • alt-php81-dba_8.1.34-39_arm64.deb
    sha:35766d0514887cf137cb755c67c6ca2b65378714
  • alt-php81-dev_8.1.34-39_arm64.deb
    sha:5f94c02f1efb23c554be206d67530befa93cb879
  • alt-php81-enchant_8.1.34-39_arm64.deb
    sha:f28f1d31fc924b8e78b255b93af0468be87b2031
  • alt-php81-firebird_8.1.34-39_arm64.deb
    sha:7c305e5571db3066b36456d6991ef2170bcf8210
  • alt-php81-gd_8.1.34-39_arm64.deb
    sha:57279bbca5cd710930b3b201cc0822177da916a1
  • alt-php81-imap_8.1.34-39_arm64.deb
    sha:f67d1b3ee11cd7e2f622ee56796d0b4986105d41
  • alt-php81-intl_8.1.34-39_arm64.deb
    sha:ad4d3f635df3fcbd2736d3985720f9667d769d12
  • alt-php81-ldap_8.1.34-39_arm64.deb
    sha:a45f72b2ea911f6ffd1a47e200401ccc5d2b41dd
  • alt-php81-mbstring_8.1.34-39_arm64.deb
    sha:1ff98d468db2a4d03c1a34f15fad842cd9cbf82c
  • alt-php81-mysqlnd_8.1.34-39_arm64.deb
    sha:3fde14b485154414479f7158114ddf6e8ad555ce
  • alt-php81-odbc_8.1.34-39_arm64.deb
    sha:dbf6421117ab0aacafecfe8b9508de863f10bdc7
  • alt-php81-opcache_8.1.34-39_arm64.deb
    sha:52b03b94b9176aed9c8966b2f3c771bc3d61b537
  • alt-php81-pdo_8.1.34-39_arm64.deb
    sha:46a9621aaed7c54896b2e7e2cf0f5811455ae82f
  • alt-php81-pgsql_8.1.34-39_arm64.deb
    sha:c8615b41d863b3c410e2b6b41f96a1bae1fac0c7
  • alt-php81-php-fpm_8.1.34-39_arm64.deb
    sha:7ed0a2dae65c051398aafd2e3f986f1ac98db787
  • alt-php81-process_8.1.34-39_arm64.deb
    sha:87514078ec3b2a572656ccc0b380abe69fcde96c
  • alt-php81-pspell_8.1.34-39_arm64.deb
    sha:846d3f6078b52185b7d434389649ce725dfeace6
  • alt-php81-snmp_8.1.34-39_arm64.deb
    sha:730f220294ad7322ce8ed95d2640b9e4c9f404ac
  • alt-php81-soap_8.1.34-39_arm64.deb
    sha:dcd3393f5e8527f2e842a0b7e8e7bef252010975
  • alt-php81-sodium_8.1.34-39_arm64.deb
    sha:4a164e090d3479514d9b8e0555d43a5ef37fb75a
  • alt-php81-tidy_8.1.34-39_arm64.deb
    sha:c9e572f2008bb90932a4a7fd9e9da0d0abbb74d3
  • alt-php81-xml_8.1.34-39_arm64.deb
    sha:71ab1cc2e5eb18a91d897329252326e6950fb714
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.